The vulnerability of the Device Association Service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Device Association Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-77500

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69866

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69791

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69714

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69711

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69574

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69488

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69478

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69296

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73884

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83940

CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...

EUVD-2026-73587

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69866

CVE-2026-69866 is a use-after-free vulnerability in Windows Device Association Service that allows an authorized local attacker to escalate privileges. The CVSS v3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access , low privi...

EUVD-2026-73583

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69714

CVE-2026-69714 is a stack-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , with a CVSS 3.1 score of 8.0 (HIGH) and impacts of High across Confid...

EUVD-2026-73577

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69791

CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges require...

EUVD-2026-73541

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69581

CVE-2026-69581 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized, locally authenticated attacker to elevate privileges . The attack requires low privileges , involves high complexity , and needs no user interaction , with unchanged scope but hig...